Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/WedgLluGTJTzHQnJP9grvZAOUsw.roa
File: WedgLluGTJTzHQnJP9grvZAOUsw.roa (raw, json)
Hash identifier: N0NSNlYU3fpU0zRTbGteHBLs7Ql/VAmUnmHt8Y6bTbE=
Subject key identifier: 59:E7:60:2E:5B:86:4C:94:F3:1D:09:C9:3F:D8:2B:BD:90:0E:52:CC
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019492202071009DF0D0572A50D6AFE89D29
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/WedgLluGTJTzHQnJP9grvZAOUsw.roa
Signing time: Thu 23 Jan 2025 07:46:06 +0000
ROA not before: Thu 23 Jan 2025 07:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0c:6980::/29 maxlen: 29
2a0c:f642::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 08 Feb 2025 18:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:20:20:71:00:9d:f0:d0:57:2a:50:d6:af:e8:9d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 23 07:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59e7602e5b864c94f31d09c93fd82bbd900e52cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:64:ae:eb:22:a8:17:27:e8:34:37:2e:2b:
4a:18:0b:f9:84:c8:80:1a:ba:b2:81:3f:31:30:94:
1b:a8:c4:8d:66:1d:47:c8:27:cd:d7:00:2e:09:1c:
54:fd:ee:63:21:fc:95:86:12:97:7c:3d:dd:61:f1:
d8:16:be:84:bc:43:32:f3:2d:05:8e:27:9e:1d:4c:
6c:33:b4:14:1b:47:50:b7:83:26:39:d2:b0:48:6f:
90:4d:2c:ec:3d:43:51:0f:ac:aa:84:3c:5d:0d:42:
e3:ab:b0:b9:21:a6:a2:81:62:0a:46:b9:a4:8e:b0:
44:6f:b7:4d:c8:ac:db:6a:2c:9d:6f:dc:8f:b7:52:
bd:25:48:3d:ce:48:6a:c9:c7:a4:6e:ab:a2:dc:ba:
3d:f2:ea:e7:a3:7e:3e:8a:2c:e8:b8:76:ca:41:ce:
b6:7c:8e:1d:9c:24:8d:e2:ab:bc:b7:be:43:d4:20:
e7:b6:a6:79:43:24:c1:1c:3c:7a:97:6c:7a:89:d6:
c6:4d:f8:df:29:38:dd:6a:a6:d8:b2:2e:26:06:8f:
95:76:70:99:52:3a:88:82:33:ca:11:2b:be:b7:3b:
f4:ad:4a:6d:85:d8:df:0a:6a:39:1f:48:ce:71:fe:
c8:aa:23:0e:1f:c2:97:61:d7:75:e7:ec:55:e1:6c:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:60:2E:5B:86:4C:94:F3:1D:09:C9:3F:D8:2B:BD:90:0E:52:CC
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/WedgLluGTJTzHQnJP9grvZAOUsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.119.0/24
94.232.248.0/24
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0c:6980::/29
2a0c:f642::/32
Signature Algorithm: sha256WithRSAEncryption
30:5c:30:f2:e6:cc:ef:40:73:51:9d:1c:e1:c9:9d:52:40:70:
9f:16:c6:ea:c8:c2:c3:c9:ec:bf:bc:d9:ef:d2:5a:24:22:e5:
d9:fa:d5:b2:c3:cb:b8:2d:bf:f3:3e:b7:25:2a:fe:91:d3:3a:
6a:b6:f5:8e:03:f1:89:49:a4:9d:58:d7:fe:6a:08:5b:76:e2:
71:08:f0:54:91:8e:71:1a:e9:51:6f:1c:a7:b3:2e:51:e5:10:
76:26:0d:dc:72:fd:92:63:d6:e9:3a:23:1d:28:89:07:17:3d:
c4:9a:c0:84:6b:44:34:e5:f0:e4:65:1a:d0:e2:92:89:b2:d1:
4b:53:5b:d5:c2:24:0f:60:6f:8b:67:71:25:27:5e:d1:bf:76:
06:d6:7d:cc:e1:6b:10:ee:ea:81:0c:07:b3:5f:22:02:2c:9a:
2a:0f:af:fd:77:08:aa:11:8b:7e:79:02:44:ff:2d:4b:d2:0e:
9f:6f:f2:50:63:93:d4:23:53:ba:42:de:5c:9b:a0:62:ee:13:
ed:f6:c8:80:25:17:25:41:06:b7:7d:a5:08:55:3a:41:a7:32:
e4:4f:14:9a:ea:be:4e:5e:bb:e6:bf:1f:76:44:9f:ab:92:06:
57:25:04:39:82:2f:2b:db:1c:7d:90:19:cb:e5:aa:5f:6e:a9:
89:18:55:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:36:48 2025 by rpki-client